CVE-2026-70341: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Other sources
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 152.0.4191.52 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 152.0.4191.53
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The attacker must be authorized and have low privileges. Exploitation is possible over a network and does not require user interaction.
Which Edge platforms are listed as affected?
The affected software list includes Microsoft Edge (Chromium-based), Microsoft Edge, and Edge versions for iOS, macOS, Linux, and Android.
What is the potential impact if exploitation succeeds?
Successful exploitation can allow code execution and has high potential impact on confidentiality, integrity, and availability. The vulnerability is rated high severity with a CVSS score of 8.5.